USN-1326-1: Nova vulnerability

Ubuntu Security Notice USN-1326-1

nova vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

Ubuntu 11.10

Summary

Nova would allow unintended access to resources over the network.

Software description

nova
- OpenStack Compute cloud infrastructure

Details

Nachi Ueno, Rohit Karajgi, and Venkatesan Ravikumar discovered that whenNova is configured to use the OpenStack API, it would not correctly enforceaccess controls on certain incoming requests. A remote authenticatedattacker could exploit this to change resources of arbitrary tenants.

Update instructions

The problem can be corrected by updating your system to the following
package version: